electric.soap.security.handlers
Class SecurityHandler

java.lang.Object
  electric.soap.handlers.chain.ChainedSOAPHandler
      electric.soap.security.handlers.SecurityHandler

All Implemented Interfaces:

IChainedSOAPHandler, IEXMLLoggingConstants, IGLUEContextConstants, IGLUELoggingConstants, ILoggingConstants, ISOAPConstants, ISOAPHandler, IWSSConstants, IWSSContextConstants, IXMLConstants

public class SecurityHandler

extends ChainedSOAPHandler

implements IWSSConstants, IWSSContextConstants, ISOAPConstants, IXMLConstants, IGLUELoggingConstants, IGLUEContextConstants

SecurityHandler is responsible for verifying the WS-Security requirements of incoming requests, and adding WS-Security information to outgoing responses. SecuritySOAPReference does the same thing for the client side, and should have essentially the same code.

Author:

webmethods

See Also:

SecuritySOAPReference

Field Summary

protected WSSEncryptionProcessor	encryptionProcessor
protected IService	service
protected WSSSignatureProcessor	signatureProcessor
protected SecurityTokenProcessor	tokenProcessor

Fields inherited from class electric.soap.handlers.chain.ChainedSOAPHandler

nextHandler

Fields inherited from interface electric.soap.security.IWSSConstants

PASSWORD_DIGEST, PASSWORD_TEXT, SECURITY, SECURITY_TOKEN_REFERENCE, URI_ATTRIBUTE, WSSE_NAMESPACE, WSSE_PREFIX, WSU_NAMESPACE, WSU_PREFIX, X509_ENCODING_TYPE

Fields inherited from interface electric.soap.security.IWSSContextConstants

WSS_AUTHENTICATE, WSS_TOKENS

Fields inherited from interface electric.soap.ISOAPConstants

ACTOR, ASYNC, BODY, DETAIL, ENCODING_STYLE, ENVELOPE, EXCEPTION, FAULT, FAULT_ACTOR, FAULT_CODE, FAULT_STRING, GET_SOAP_ACTOR, GET_SOAP_CODE, HEADER, MUST_UNDERSTAND, NEXT_ACTOR, OPTIMIZED_HEADER, SET_SOAP_ACTOR, SET_SOAP_CODE, SET_SOAP_DETAIL, SOAP_ACTION_HEADER, SOAP_BINDING, SOAP_ENCODING, SOAP_ENCODING_PREFIX, SOAP_ENVELOPE, SOAP_HTTP_TRANSPORT, SOAP_PREFIX, SOAP11_BINDING, SOAP11_ENCODING, SOAP11_ENVELOPE, SOAP12, SOAP12_BINDING, SOAP12_ENCODING, SOAP12_ENVELOPE, SOAP12_HTTP_CONTENT_TYPE, STACKTRACE, TME_PREFIX, UNDERSTOOD, XSD_PREFIX, XSI_PREFIX, XSI_SUFFIX

Fields inherited from interface electric.xml.IXMLConstants

ATTLIST_START, ATTLIST_STOP, CDATA, CDATA_START, CDATA_STOP, CLOSE_TAG, COLON, COMMENT_START, COMMENT_STOP, DOCTYPE_START, DOCTYPE_STOP, ELEMENTDECL_START, ELEMENTDECL_STOP, ENCODING, ENTITYDECL_START, ENTITYDECL_STOP, ID, ID_CASE, INSTRUCTION_START, INSTRUCTION_STOP, NEGATIVE_INFINITY, NOT_A_NUMBER, NOTATIONDECL_START, NOTATIONDECL_STOP, NULL, OPEN_TAG, POSITIVE_INFINITY, PUBLIC, SPECIALS, STANDALONE, SUBSTITUTES, SYSTEM, UNDEFINED, VERSION, XML, XML_NAMESPACE, XMLDECL_START, XMLDECL_STOP, XMLNS, XMLNS_NAMESPACE

Fields inherited from interface electric.glue.IGLUELoggingConstants

CLUSTER_DEBUG_EVENT, CLUSTER_EVENT, CONSOLE_DEBUG_EVENT, DEPLOY_EVENT, DETECTORS_EVENT, HTTP_EVENT, JMS_EVENT, REBINDING_EVENT, SECURITY_DEBUG_EVENT, SECURITY_DETAIL_EVENT, SERVLET_EVENT, SOAP_EVENT

Fields inherited from interface electric.xml.IEXMLLoggingConstants

MAPPING_EVENT, SCHEMA_EVENT

Fields inherited from interface electric.util.log.ILoggingConstants

CLASSLOADER_EVENT, COMMAND_EVENT, COMMENT_EVENT, CONFIG_EVENT, DEBUG_EVENT, ELECTRIC_LOGGING_PROPERTY, ERROR_EVENT, EXCEPTION_EVENT, FILE_EVENT, LICENSE_EVENT, RESOURCES_EVENT, SECURITY_EVENT, SHUTDOWN_EVENT, SOURCE_EVENT, SQL_EVENT, STARTUP_EVENT, WARNING_EVENT

Fields inherited from interface electric.glue.IGLUEContextConstants

ACTIVATION, APPLICATION, ATTACHMENT_STYLE, AUTH_METHOD, AUTH_PASSWORD, AUTH_SESSION_STATE, AUTH_USER, AUTHENTICATE, CLASS_LOADERS, CLASS_NAME, CLIENT_ID, CLIENT_SOCKET_READ_TIMEOUT, CONSTRUCTOR, CONTENT_TYPE, COOKIE_LISTENER, DATA_DIRECTORY, DATA_HANDLER, DATABASE, DATABASE_PERSISTENCE, DELETE, DESCRIPTION, DIME, DOC_BASE, DOCUMENT, DYNAMIC_OPERATIONS, ENCODED, ENDPOINT, FACTORY, FOLLOW_REDIRECTS, FORCE_ATTACHMENT_STYLE, FORWARD_INTERMEDIARY, GUARD, HTTP_REGISTRY_ROOT, HTTP_REQUEST, HTTP_RESPONSE, HTTP_SERVLET_CONFIG, INBOUND_SOAP_REQUEST_INTERCEPTOR, INBOUND_SOAP_RESPONSE_INTERCEPTOR, INSTRUMENTATION_LISTENER, INSTRUMENTOR, INTERFACE, INVOCATION_LISTENER, JNDI_PROPERTIES, KEEP_ALIVE, LAZY, LITERAL, LOCAL_ADDRESS, MESSAGE_NAME, METHOD, MIME, NAMESPACE, NET_EVENT_REAPER_CYCLE, NET_EVENT_REAPER_EXPIRY_PERIOD, NET_EVENT_RETRY_PERIOD, OUTBOUND_SOAP_REQUEST_INTERCEPTOR, OUTBOUND_SOAP_RESPONSE_INTERCEPTOR, PERSISTENCE_TYPE, PRIORITY, PROXY_HOST, PROXY_PASSWORD, PROXY_PORT, PROXY_USER, PUBLISH, QUERY_STRING, REALM, REGISTRY_ROOT, RESPONSE_UNREFED_ATTACHMENTS, RETURN_NAME, ROLE, RP_NAMESPACE, RPC, SERVICE, SERVICE_CONTEXT, SERVLET_NAME, SERVLET_PATH, SIGNATURE, SMART_CONNECTIONS, SOAP_ACTION, SOAP_ENCODING_STYLE, SOAP_PERSONALITY, SOAP_REQUEST, SOAP_VERSION, SSL_KEY_MANAGER, SSL_TRUST_MANAGER, STYLE, TARGET_NAMESPACE, TRANSACTION, TRANSPORT_SOURCE, UNREFED_ATTACHMENTS, USE, WSDL_NAME, WSDL_PERSONALITY, WSS_CONTEXT, XML_ENCODING, XML_INCLUDE, XML_PERSISTENCE

Constructor Summary

SecurityHandler(IService service, ISOAPHandler nextHandler)

Method Summary

SOAPMessage	handle(SOAPMessage request, Context messageContext) Handle the specified SOAP request and return the SOAP response.
protected void	handleMustUnderstand(SOAPMessage message, Context messageContext) GLUE processes SOAP "mustUnderstand" headers by checking to see if they've been added as "handled" to the service context.

Methods inherited from class electric.soap.handlers.chain.ChainedSOAPHandler

getNextHandler, setNextHandler

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

service

protected IService service

tokenProcessor

protected SecurityTokenProcessor tokenProcessor

signatureProcessor

protected WSSSignatureProcessor signatureProcessor

encryptionProcessor

protected WSSEncryptionProcessor encryptionProcessor

Constructor Detail

SecurityHandler

public SecurityHandler(IService service,
                       ISOAPHandler nextHandler)

Parameters:

service -

nextHandler -

Method Detail

handle

public SOAPMessage handle(SOAPMessage request,
                          Context messageContext)
                   throws java.rmi.RemoteException,
                          java.lang.SecurityException

Description copied from interface: ISOAPHandler

Handle the specified SOAP request and return the SOAP response.

Specified by:

handle in interface ISOAPHandler

Parameters:

request -

messageContext -

Throws:

java.lang.SecurityException

java.rmi.RemoteException

handleMustUnderstand

protected void handleMustUnderstand(SOAPMessage message,
                                    Context messageContext)

GLUE processes SOAP "mustUnderstand" headers by checking to see if they've been added as "handled" to the service context. Indicate that we understand the wss:Security header.

Parameters:

message -

messageContext -